On Tue, Apr 16, 2013 at 01:52:38PM -0700, 'Robert Holtzman' wrote:
> On Thu, Apr 11, 2013 at 02:43:15PM +0100, Nick Warr wrote:
> > 
> > I actually had to drop the cron jobs on my system, and call rkhunter from a
> > bash script, which is then run from cron. 
> > 
> > I don't know why, and since the solution is simple enough, I'm not bothering
> > to find out why it doesn't work.
> > 
> > Anyhow, take a look at /var/log/rkhunter.log, if you don't see the date at
> > the top corresponding with when you set it to run in cron, it's not running.
> 
> Sorry to be late with this. 
> 
> No entry in the log like that but neither was there one in the .conf
> file on the desktop (remember the laptop's .conf file was copied from
> the desktop). I did, however find a log entry on the very beginning of
> /var/log/rkhunter.log.old :" No mail-on-warning address configured"
> which doesn't appear on that log for the desktop. Also there is no
> mail-on-warning address in either file. 
> 
> One thing brought up on my local LUG's list is that the laptop may not
> be running when cron fires rkhunter. Sounds reasonable since the desktop
> runs 24/7 and the laptop is off all night (when cron calls rkhunter).
> I'll check this tonight and let you know.  
> 
Ran the laptop all night on AC and found the DE locked up in the
morning. No mouse, no keyboard, no nothing. Couldn't even use
ctrl+alt+f1. Had to do a hard reboot. Dropped to a shell and repeated
the experiment of running all night. Still no joy with rkhunter
notification email.

Next I added my email address to MAIL-ON-WARNING in /etc/rkhunter.conf.
It had been MAIL-ON-WARNING="". I thought that was weird but it was the
same on my desktop where I got the emails every day. Result...still no
joy.

I'm out of Ideas. If anyone has a clue please let me know. 

-- 
Bob Holtzman
If you think you're getting free lunch, 
check the price of the beer.
Key ID: 8D549279

Attachment: signature.asc
Description: Digital signature

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_apr
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to